PT-2025-24521 · Unknown · Cryptocloud - Crypto Payment Gateway

Name of the Vulnerable Software and Affected Versions: CryptoCloud - Crypto Payment Gateway versions n/a through 2.1.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

CVE-2025-30945

Missing Authorization vulnerability in taskbuilder Taskbuilder taskbuilder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Taskbuilder: from n/a through = 4.0.7...

CVE-2025-30945

Missing Authorization vulnerability in taskbuilder Taskbuilder taskbuilder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Taskbuilder: from n/a through = 4.0.7...

CVE-2025-30932

CVE-2025-30932 concerns WP Compress for MainWP with Missing Authorization due to misconfigured access controls. Affected versions range up to 6.30.32; Wordfence notes the issue has been patched. No exploit details are provided in the sources; no additional vectors or mitigations are specified bey...

CVE-2025-49241

CVE-2025-49241: Missing Authorization in the bobbingwide oik plugin (WordPress) allows bypass of access controls on versions up to 4.15.1. The issue is confirmed by Wordfence and Red Hat entries; remediation is to upgrade to oik 4.15.1 or later as documented by the sources.

PT-2025-24156 · Wordapp · Wordapp

Name of the Vulnerable Software and Affected Versions: Wordapp versions 1.7.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in Wordapp Team Wordapp, which allows exploiting incorrectly configured access control security levels. Recommendations: For version...

CVE-2023-24375

Missing Authorization vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register Discord, Google, Twitter, LinkedIn: from n/a...

CVE-2025-26920

CVE-2025-26920 is a Missing Authorization vulnerability affecting the WordPress Customify theme (versions

CVE-2025-39388

CVE-2025-39388: Missing Authorization in AnalyticsWP (WordPress plugin) allows access to functionality not constrained by ACLs in AnalyticsWP versions

PT-2025-21712 · Eventon · Eventon

Name of the Vulnerable Software and Affected Versions: EventON versions n/a through 4.9.9 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through 4.9.9, update to a...

PT-2025-17023 · Unknown · Mingocommerce Delete All Posts

Name of the Vulnerable Software and Affected Versions: mingocommerce Delete All Posts versions n/a through 1.1.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

CVE-2025-39531

Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Slazzer Background Changer: from n/a through = 3.14...

CVE-2025-26944

CVE-2025-26944 : Missing Authorization in WordPress JetPopup (versions n/a through 2.0.11) allows accessing functionality not constrained by ACLs. Affected product: JetPopup (WordPress plugin). Impact per provided data: high (CVSS 3.1 base 7.5). Remediation: upgrade to a version later than 2.0.11...

PT-2025-16319 · Jetpopup · Jetpopup

Name of the Vulnerable Software and Affected Versions: JetPopup versions n/a through 2.0.11 Description: The issue is related to a Missing Authorization vulnerability in JetPopup, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through...

CVE-2025-32208

CVE-2025-32208 (Hive Support WordPress plugin) is supported by connected documents as a real vulnerability, not a placeholder. The Hive Support plugin (WordPress) is affected by a missing authorization/capability check in functions hs_update_ai_chat_settings() and hive_lite_support_get_all_binbox...

CVE-2025-31820

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.4...

CVE-2025-31799

Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Publitio: from n/a through = 2.1.8...

CVE-2025-22739

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through = 4.2.7.5...

CVE-2025-30581

Missing Authorization vulnerability in PluginOps Top Bar ultimate-bar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top Bar: from n/a through = 3.3...

CVE-2025-26961

Missing Authorization vulnerability in FRESHFACE Fresh Framework fresh-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Fresh Framework: from n/a through = 1.70.0...